Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215304.roa
File: AS215304.roa (raw, json)
Hash identifier: ccVKKSMoiGVxmYArsJrB0nL8lMplYWlcnCGleQEL/rQ=
Subject key identifier: 85:04:DE:2B:78:02:C1:B1:31:5D:57:7B:06:B0:12:77:6E:97:06:87
Certificate issuer: /CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Certificate serial: 54172D079C31585245304C018A9240D725738F5B
Authority key identifier: 03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215304.roa
Signing time: Fri 23 May 2025 17:32:00 +0000
ROA not before: Fri 23 May 2025 17:27:00 +0000
ROA not after: Fri 22 May 2026 17:32:00 +0000
asID: 215304
IP address blocks: 192.166.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.mft
rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 20:42:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:17:2d:07:9c:31:58:52:45:30:4c:01:8a:92:40:d7:25:73:8f:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03b1ba3fdb91d8d9ea76c5776320eb7eb2d6ed9d
Validity
Not Before: May 23 17:27:00 2025 GMT
Not After : May 22 17:32:00 2026 GMT
Subject: CN=8504DE2B7802C1B1315D577B06B012776E970687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f3:f3:44:be:13:c7:28:47:eb:2d:53:1f:a9:
aa:8d:df:fc:19:6a:43:16:4b:7e:46:e8:c8:a3:21:
8d:92:10:9e:9a:36:13:f8:e7:e9:ee:23:bc:74:ad:
da:7b:c2:5e:86:0e:d5:55:5a:a6:c2:5c:b7:16:d3:
1a:9a:4d:84:a0:2a:e1:3e:d8:da:30:5b:96:33:56:
2d:0b:74:18:e3:47:6f:15:eb:a1:ce:be:ff:bb:7f:
c2:73:2f:54:e1:91:c8:1c:36:7c:eb:70:d8:94:a5:
79:38:5f:48:65:f5:bc:ae:e5:20:58:68:b9:05:54:
76:1c:c6:b6:34:e9:9c:92:1e:fe:11:09:9c:6d:ae:
e5:65:ff:79:70:ce:26:d4:3b:b0:e1:a3:a9:b5:1c:
42:6b:10:61:b1:a7:19:1f:95:62:b4:7c:d6:b9:04:
6f:43:d5:f7:5d:9e:50:96:1b:c0:06:e7:25:91:b6:
d9:0f:ab:0d:a9:b8:e1:e0:87:86:b5:e8:da:86:7e:
26:d4:2a:a2:f3:89:7a:93:6f:bf:3d:af:52:78:96:
aa:fb:ff:d9:6b:0e:51:7c:6e:89:2f:cf:d6:82:73:
58:4f:6b:8c:93:2c:f5:cc:ed:ce:a6:61:f5:4e:42:
ea:1a:25:fa:e5:a6:c7:3d:57:30:fc:20:20:a6:25:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:04:DE:2B:78:02:C1:B1:31:5D:57:7B:06:B0:12:77:6E:97:06:87
X509v3 Authority Key Identifier:
keyid:03:B1:BA:3F:DB:91:D8:D9:EA:76:C5:77:63:20:EB:7E:B2:D6:ED:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/03B1BA3FDB91D8D9EA76C5776320EB7EB2D6ED9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A7G6P9uR2NnqdsV3YyDrfrLW7Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7ff0f555-dba7-4192-a01d-f6916d5bb84e/0/AS215304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.114.0/24
Signature Algorithm: sha256WithRSAEncryption
73:72:cc:af:db:fc:78:e8:8b:23:5f:eb:05:54:f7:1e:c8:96:
d9:a8:4b:bb:4e:a0:92:17:38:d8:78:9f:1f:69:0a:c7:76:c9:
33:e5:22:a2:34:9b:ec:e7:ed:af:07:2d:6f:f0:62:d4:dd:4c:
e0:b0:d5:1d:d2:04:3e:a9:1b:52:af:6c:86:be:3d:a6:1b:a0:
4a:cd:6b:77:f0:40:40:71:ef:ff:8b:1b:d7:fa:f0:ed:88:72:
4e:91:3a:fb:df:1e:25:cd:74:c1:f4:d5:5b:25:d9:0c:d5:66:
9a:db:cb:77:07:b3:53:e5:73:cb:fb:d1:69:4d:29:96:81:a2:
64:b7:e1:e5:74:a0:cf:71:b4:cb:56:43:3b:7c:d6:83:15:5c:
72:3b:d7:d3:32:c7:5f:50:77:c1:87:fd:fb:92:0a:20:cc:ce:
32:68:93:5d:21:26:21:8d:4e:dc:4b:f4:9a:92:bd:68:c0:1e:
90:62:09:82:d8:7f:c8:e8:75:15:96:fc:13:8b:19:bd:21:8f:
d4:af:6f:25:f5:24:d5:01:4a:20:00:80:ca:e4:bf:73:b5:c6:
56:30:7d:bc:17:be:8e:ba:49:82:8b:e0:4a:ab:47:ab:e2:cc:
8f:53:0e:d2:96:6c:1d:fb:2a:42:b3:26:b2:15:86:19:ea:fc:
73:04:9a:b3
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIUVBctB5wxWFJFMEwBipJA1yVzj1swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNiMWJhM2ZkYjkxZDhkOWVhNzZjNTc3NjMyMGViN2Vi
MmQ2ZWQ5ZDAeFw0yNTA1MjMxNzI3MDBaFw0yNjA1MjIxNzMyMDBaMDMxMTAvBgNV
BAMTKDg1MDRERTJCNzgwMkMxQjEzMTVENTc3QjA2QjAxMjc3NkU5NzA2ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX8/NEvhPHKEfrLVMfqaqN3/wZ
akMWS35G6MijIY2SEJ6aNhP45+nuI7x0rdp7wl6GDtVVWqbCXLcW0xqaTYSgKuE+
2NowW5YzVi0LdBjjR28V66HOvv+7f8JzL1ThkcgcNnzrcNiUpXk4X0hl9byu5SBY
aLkFVHYcxrY06ZySHv4RCZxtruVl/3lwzibUO7Dho6m1HEJrEGGxpxkflWK0fNa5
BG9D1fddnlCWG8AG5yWRttkPqw2puOHgh4a16NqGfibUKqLziXqTb789r1J4lqr7
/9lrDlF8bokvz9aCc1hPa4yTLPXM7c6mYfVOQuoaJfrlpsc9VzD8ICCmJU/pAgMB
AAGjggIKMIICBjAdBgNVHQ4EFgQUhQTeK3gCwbExXVd7BrASd26XBocwHwYDVR0j
BBgwFoAUA7G6P9uR2NnqdsV3YyDrfrLW7Z0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvN2ZmMGY1NTUtZGJhNy00MTkyLWEwMWQtZjY5MTZkNWJi
ODRlLzAvMDNCMUJBM0ZEQjkxRDhEOUVBNzZDNTc3NjMyMEVCN0VCMkQ2RUQ5RC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0E3RzZQOXVSMk5ucWRzVjNZeURyZnJM
VzdaMC5jZXIwewYIKwYBBQUHAQsEbzBtMGsGCCsGAQUFBzALhl9yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzdmZjBmNTU1LWRiYTct
NDE5Mi1hMDFkLWY2OTE2ZDViYjg0ZS8wL0FTMjE1MzA0LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKZy
MA0GCSqGSIb3DQEBCwUAA4IBAQBzcsyv2/x46IsjX+sFVPceyJbZqEu7TqCSFzjY
eJ8faQrHdskz5SKiNJvs5+2vBy1v8GLU3UzgsNUd0gQ+qRtSr2yGvj2mG6BKzWt3
8EBAce//ixvX+vDtiHJOkTr73x4lzXTB9NVbJdkM1Waa28t3B7NT5XPL+9FpTSmW
gaJkt+HldKDPcbTLVkM7fNaDFVxyO9fTMsdfUHfBh/37kgogzM4yaJNdISYhjU7c
S/Sakr1owB6QYgmC2H/I6HUVlvwTixm9IY/Ur28l9STVAUogAIDK5L9ztcZWMH28
F76OukmCi+BKq0er4syPUw7Slmwd+ypCsyayFYYZ6vxzBJqz
-----END CERTIFICATE-----
Generated at Fri Jun 6 06:14:26 2025 by rpki-client